{"action":"Upgrade github.com/kubernetes/kubernetes to 1.19.3 or later.","affected":[{"fixed":"1.19.3","introduced":"0"}],"component":"github.com/kubernetes/kubernetes","cve_ids":["CVE-2020-8563"],"ecosystem":"Go","epss":0.00539,"exploited":false,"fixed_versions":["1.19.3"],"ghsa_id":"GHSA-5xfg-wv98-264m","id":"tcs_01M5KEZ1TGCB40ZBQ9DV6TGAH5","modified_at":"2024-06-05T16:43:09.970765Z","published_at":"2024-04-24T20:02:20Z","references":["https://osv.dev/vulnerability/GHSA-5xfg-wv98-264m","https://nvd.nist.gov/vuln/detail/CVE-2020-8563","https://github.com/kubernetes/kubernetes/issues/95621","https://github.com/kubernetes/kubernetes/pull/95236","https://github.com/kubernetes/kubernetes/pull/95236/commits/247f6dd09299bc7893c1e0affea11c0255025b96","https://bugzilla.redhat.com/show_bug.cgi?id=1886635","https://github.com/kubernetes/kubernetes","https://groups.google.com/g/kubernetes-announce/c/ScdmyORnPDk","https://groups.google.com/g/kubernetes-security-discuss/c/vm-HcrFUOCs/m/36utxAM5CwAJ","https://security.netapp.com/advisory/ntap-20210122-0006"],"severity":{"label":"medium","score":6.3},"sources":[{"source":"osv","source_id":"GHSA-5xfg-wv98-264m","url":"https://osv.dev/vulnerability/GHSA-5xfg-wv98-264m"}],"summary":"Sensitive Information leak via Log File in Kubernetes"}